[yocto] [meta-security][PATCH 3/5] suricata: update to 6.0.2

needs rust Signed-off-by: Armin Kuster --- .../recipes-ids/suricata/files/fixup.patch| 32 + .../recipes-ids/suricata/files/run-ptest |3 + .../suricata/files/suricata.service | 20 + .../recipes-ids/suricata/files/suricata.yaml | 1326 +

[yocto] [meta-security][PATCH 5/5] README: cleanup

Add note about rust. Signed-off-by: Armin Kuster --- README | 27 +++ 1 file changed, 15 insertions(+), 12 deletions(-) diff --git a/README b/README index f223fee..eb15366 100644 --- a/README +++ b/README @@ -11,28 +11,19 @@ This layer depends on: URI:

[yocto] [meta-security][PATCH 4/5] layer.conf: add dynamic-layer for rust pkg

Signed-off-by: Armin Kuster --- conf/layer.conf | 4 1 file changed, 4 insertions(+) diff --git a/conf/layer.conf b/conf/layer.conf index fd21da1..906e024 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -12,3 +12,7 @@ BBFILE_PRIORITY_security = "8" LAYERSERIES_COMPAT_security =

[yocto] [meta-security][PATCH 1/5] swtpm: fix check for tscd deamon on host

Found a few places that tscd check was trying to run the hosts. Signed-off-by: Armin Kuster --- .../swtpm/files/oe_configure.patch| 65 +++ meta-tpm/recipes-tpm/swtpm/swtpm_0.5.2.bb | 1 + 2 files changed, 66 insertions(+) create mode 100644

[yocto] [meta-security][PATCH 2/5] python3-suricata-update: update to 1.2.1

Signed-off-by: Armin Kuster --- ...a-update_1.1.1.bb => python3-suricata-update_1.2.1.bb} | 8 +--- 1 file changed, 5 insertions(+), 3 deletions(-) rename recipes-ids/suricata/{python3-suricata-update_1.1.1.bb => python3-suricata-update_1.2.1.bb} (69%) diff --git

[yocto] [meta-security][PATCH 1/4] python3-privacyidea: upgrade 3.5.1 -> 3.5.2

Signed-off-by: Armin Kuster --- ...ython3-privacyidea_3.5.1.bb => python3-privacyidea_3.5.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/mfa/{python3-privacyidea_3.5.1.bb => python3-privacyidea_3.5.2.bb} (96%) diff --git

[yocto] [meta-security][PATCH 2/4] clamav: fix systemd service install

ERROR: clamav-0.104.0-r0 do_package: QA Issue: clamav: Files/directories were installed but not shipped in any package: /lib/systemd/system/clamav-daemon.service /lib/systemd/system/clamav-clamonacc.service Signed-off-by: Armin Kuster --- recipes-scanners/clamav/clamav_0.104.0.bb | 5

[yocto] [meta-security][PATCH 4/4] swtpm: file pip3 issue

need native pip3, was using host's Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm/swtpm/swtpm_0.5.2.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta-tpm/recipes-tpm/swtpm/swtpm_0.5.2.bb b/meta-tpm/recipes-tpm/swtpm/swtpm_0.5.2.bb index b7ff2ad..c0bd35e 100644

[yocto] [meta-security][PATCH 3/4] swtpm: now need python-cryptography, pull in layer

Signed-off-by: Armin Kuster --- meta-tpm/conf/layer.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf index 65788eb..1b766cb 100644 --- a/meta-tpm/conf/layer.conf +++ b/meta-tpm/conf/layer.conf @@ -13,6 +13,7 @@

[yocto] [meta-security][V2][PATCH] clamav: upgrade 104.0

convert to cmake and general cleanup include on oe env patch and glibc 2.33 header fixup if running w/in qemu, need to add qemuparams="-m 2048" to allow freshclam not to oom Signed-off-by: Armin Kuster --- V2] Bump PV to match what is being d/l --- .../{clamav_0.101.5.bb =>

Re: [yocto] [meta-security][PATCH] clamav: upgrade 103.0

On 3/27/21 2:12 PM, Quentin Schulz wrote: > Hi Armin, > > On March 27, 2021 7:04:53 PM UTC, akuster wrote: >> convert to cmake and general cleanup >> >> include on oe env patch and glibc 2.33 header fixup >> >> if running w/in qemu, need to add qem

[yocto] [meta-security][PATCH] packagegroup-core-security: drop clamav-cvd

Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index

[yocto] [meta-security][PATCH] clamav: upgrade 103.0

convert to cmake and general cleanup include on oe env patch and glibc 2.33 header fixup if running w/in qemu, need to add qemuparams="-m 2048" to allow freshclam not to oom Signed-off-by: Armin Kuster --- .../{clamav_0.101.5.bb => clamav_0.103.0.bb} | 101 +++---

[yocto] [meta-security][PATCH 1/2] tpm2-tss-engine: update 1.1.0

LIC_FILES_CHKSUM hash changed between branches. Signed-off-by: Armin Kuster --- .../{tpm2-tss-engine_1.0.1.bb => tpm2-tss-engine_1.1.0.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta-tpm/recipes-tpm2/tpm2-tss-engine/{tpm2-tss-engine_1.0.1.bb =>

[yocto] [meta-security][PATCH 2/2] swtpm: update to 0.5.2

Add python package Signed-off-by: Armin Kuster --- .../swtpm/{swtpm_0.2.0.bb => swtpm_0.5.2.bb}| 17 + 1 file changed, 9 insertions(+), 8 deletions(-) rename meta-tpm/recipes-tpm/swtpm/{swtpm_0.2.0.bb => swtpm_0.5.2.bb} (78%) diff --git

Re: [yocto] [meta-security][PATCH] ima-evm-keys: add file-checksums to IMA_EVM_X509

merged, thanks On 3/12/21 1:53 AM, liu.min...@gmail.com wrote: > From: Ming Liu > > This ensures when a end user change the IMA_EVM_X509 key file, > ima-evm-keys recipe will be rebuilt. > > Signed-off-by: Ming Liu > --- > meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb | 1 + >

Re: [yocto] [meta-security][PATCH v2] samhain: fix compile error on powerpc

merged thanks On 3/11/21 1:34 AM, kai wrote: > From: Kai Kang > > It fails to comile samhain for powerpc(qemuppc): > > | x_sh_dbIO.c: In function 'swap_short': > | x_sh_dbIO.c:229:36: error: initializer element is not constant > | 229 | static unsigned short ooop = *iptr; > | |

Re: [yocto] [meta-security][PATCH] fscryptctl: Fix installation path

merged. thanks On 3/10/21 8:52 AM, Łukasz Płachno via lists.yoctoproject.org wrote: > - Without the patch fscryptctl is installed in >/usr/bin/usr/local/bin instead of /usr/bin. > --- > recipes-security/fscryptctl/fscryptctl_1.0.0.bb | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-)

[yocto] [meta-security][PATCH] layer.conf: Add hardknott to LAYERSERIES_COMPAT

Thats codename for 3.3 Signed-off-by: Armin Kuster --- conf/layer.conf | 2 +- meta-hardening/conf/layer.conf | 2 +- meta-integrity/conf/layer.conf | 2 +- meta-security-compliance/conf/layer.conf | 2 +- meta-security-isafw/conf/layer.conf | 2

Re: [yocto] Building test code?

On 3/15/21 4:11 PM, jchludzinski via lists.yoctoproject.org wrote: > I got a piece of code from github: > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/tools/spi/spidev_test.c > > I'd like to add it somewhere under /*tools/testing*/ and build it there. > > Not sure if

Re: [yocto] [meta-security][dunfell][PATCH 0/9] Some IMA/EVM fixes to dunfell branch

merged. thanks. On 3/10/21 2:31 AM, Ming Liu wrote: > Hi, akuster808: > > I saw this patch set has been merged to gatesgarth, may I ask, any > plan for dunfell? I am asking because dunfell is a LTS branch and many > users are building their products based on it. Thanks! > > the best, > thank you

Re: [yocto] [meta-security][dunfell][PATCH 0/9] Some IMA/EVM fixes to dunfell branch

On 3/10/21 2:31 AM, Ming Liu wrote: > Hi, akuster808: > > I saw this patch set has been merged to gatesgarth, may I ask, any > plan for dunfell? I am asking because dunfell is a LTS branch and many > users are building their products based on it. Thanks! that are being built current. I can on

[yocto] [meta-security][PATCH] python3-fail2ban: fix building with ptest enabled

Use new structure for testing. Signed-off-by: Armin Kuster --- recipes-security/fail2ban/files/run-ptest| 2 +- recipes-security/fail2ban/python3-fail2ban_0.11.2.bb | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/recipes-security/fail2ban/files/run-ptest

[yocto] [v2][meta-security][PATCH] libtpm: update to 0.8.2

Signed-off-by: Armin Kuster -- V2] let include the updated changes --- .../recipes-tpm/libtpm/{libtpm_0.7.2.bb => libtpm_0.8.2.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-tpm/recipes-tpm/libtpm/{libtpm_0.7.2.bb => libtpm_0.8.2.bb} (86%) diff --git

[yocto] [meta-security][PATCH] tpm-tools: update to 1.3.9.1

drop patch included in update Signed-off-by: Armin Kuster --- .../files/05-openssl1.1_fix_data_mgmt.patch | 110 -- ...-tools_1.3.9.1.bb => tpm-tools_1.3.9.2.bb} | 3 +- 2 files changed, 1 insertion(+), 112 deletions(-) delete mode 100644

[yocto] [meta-security][PATCH] trousers: update to 0.3.15

includes: CVE-2020-24332, CVE-2020-24330, CVE-2020-24331 Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm/trousers/trousers_git.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta-tpm/recipes-tpm/trousers/trousers_git.bb

[yocto] [PATCH 8/8] tpm2-tss-engine: update 1.1.0

LIC_FILES_CHKSUM hash changed between branches. Signed-off-by: Armin Kuster --- .../{tpm2-tss-engine_1.0.1.bb => tpm2-tss-engine_1.1.0.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta-tpm/recipes-tpm2/tpm2-tss-engine/{tpm2-tss-engine_1.0.1.bb =>

[yocto] [PATCH 5/8] tpm2-tss: update to 3.0.3

include automate 2.70 fix Signed-off-by: Armin Kuster --- ...fix-compatibility-with-autoconf-2.70.patch | 48 +++ .../{tpm2-tss_2.4.3.bb => tpm2-tss_3.0.3.bb} | 6 ++- 2 files changed, 52 insertions(+), 2 deletions(-) create mode 100644

[yocto] [PATCH 7/8] tpm2-topt: update 0.3.0

Signed-off-by: Armin Kuster --- .../tpm2-totp/{tpm2-totp_0.2.1.bb => tpm2-totp_0.3.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-tpm/recipes-tpm2/tpm2-totp/{tpm2-totp_0.2.1.bb => tpm2-totp_0.3.0.bb} (74%) diff --git

[yocto] [PATCH 6/8] tpm2-pkcs11: update to 1.5.0

Signed-off-by: Armin Kuster --- .../tpm2-pkcs11/{tpm2-pkcs11_1.4.0.bb => tpm2-pkcs11_1.5.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-tpm/recipes-tpm2/tpm2-pkcs11/{tpm2-pkcs11_1.4.0.bb => tpm2-pkcs11_1.5.0.bb} (96%) diff --git

[yocto] [PATCH 4/8] tpm2-tools: update to 5.0

Signed-off-by: Armin Kuster --- .../tpm2-tools/{tpm2-tools_4.3.0.bb => tpm2-tools_5.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-tpm/recipes-tpm2/tpm2-tools/{tpm2-tools_4.3.0.bb => tpm2-tools_5.0.bb} (81%) diff --git

[yocto] [PATCH 1/8] libtpm: update to 0.8.2

Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm/libtpm/{libtpm_0.7.2.bb => libtpm_0.8.2.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename meta-tpm/recipes-tpm/libtpm/{libtpm_0.7.2.bb => libtpm_0.8.2.bb} (100%) diff --git a/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb

[yocto] [PATCH 3/8] tpm2-abrmd: update to 2.4.0

Signed-off-by: Armin Kuster --- .../tpm2-abrmd/{tpm2-abrmd_2.3.3.bb => tpm2-abrmd_2.4.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-tpm/recipes-tpm2/tpm2-abrmd/{tpm2-abrmd_2.3.3.bb => tpm2-abrmd_2.4.0.bb} (97%) diff --git

[yocto] [PATCH 2/8] ibmtpm2tss: update to 1.6.0

Signed-off-by: Armin Kuster --- ...efile.am-expand-wildcards-in-prereqs.patch | 30 --- ...bmtpm2tss_1.5.0.bb => ibmtpm2tss_1.6.0.bb} | 2 +- 2 files changed, 14 insertions(+), 18 deletions(-) rename meta-tpm/recipes-tpm2/ibmtpm2tss/{ibmtpm2tss_1.5.0.bb => ibmtpm2tss_1.6.0.bb}

Re: [yocto] [meta-security][dunfell][PATCH 0/9] Some IMA/EVM fixes to dunfell branch

series in build testing -armin On 3/2/21 6:57 AM, liu.min...@gmail.com wrote: > From: Ming Liu > > Cherry pick some IMA/EVM fixes to LTS dunfell branch, with these > patches applied, I could run a ima enabled image with sysvinit/systemd > on qemuarm/qemuarm64 and some NXP machines. > > Ming

Re: [yocto] [meta-security][PATCH] ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic

merged. Thanks, Armin On 3/1/21 4:35 AM, liu.min...@gmail.com wrote: > From: Ming Liu > > This fixes following systemd boot issues: > [7.455580] systemd[1]: Failed to create /init.scope control group: > Permission denied > [7.457677] systemd[1]: Failed to allocate manager object:

[yocto] [auh][PATCH] auh: Add port 465 and 587 client support

Signed-off-by: Armin Kuster --- modules/utils/emailhandler.py | 23 +-- upgrade-helper.conf | 3 +++ 2 files changed, 24 insertions(+), 2 deletions(-) diff --git a/modules/utils/emailhandler.py b/modules/utils/emailhandler.py index 8c8b85b..a70bf23 100644 ---

Re: [yocto] [PATCH] dev-manual/common-task.rst: Added documentation for debuginfod support

Dorinda, Thanks for the patch. Documentation has its own mailing list. d...@lists.yoctoproject.org Please resend to that list. -armin On 3/1/21 6:45 AM, Dorinda wrote: > Added documentation on running debuginfod server and using it on the target. > > Signed-off-by: Dorinda Bassey > --- >

[yocto] [meta-security][PATCH 12/12] suricata: update to 4.10.0

This is the last 4.x. Will need rust support to move to 6.x Signed-off-by: Armin Kuster --- recipes-ids/suricata/{libhtp_0.5.35.bb => libhtp_0.5.36.bb} | 0 recipes-ids/suricata/suricata.inc | 4 ++-- .../suricata/{suricata_4.1.9.bb => suricata_4.1.10.bb}|

[yocto] [meta-security][PATCH 11/12] python3-fail2ban: update to 0.11.2

drop hard python3 patch and create it dufing compile. Signed-off-by: Armin Kuster --- ...0001-python3-fail2ban-2-3-conversion.patch | 2527 - ...0.10.4.0.bb => python3-fail2ban_0.11.2.bb} |7 +- 2 files changed, 4 insertions(+), 2530 deletions(-) delete mode 100644

[yocto] [meta-security][PATCH 10/12] opendnssec: update to 2.1.8

refresh libdns_conf_fix.patch Drop fix_fprint.patch includd in update Signed-off-by: Armin Kuster --- .../opendnssec/files/fix_fprint.patch | 25 --- .../opendnssec/files/libdns_conf_fix.patch| 45 +-- .../opendnssec/opendnssec_2.1.8.bb| 1 - 3

[yocto] [meta-security][PATCH 09/12] opendnssec: update to 2.1.8

Signed-off-by: Armin Kuster --- .../opendnssec/{opendnssec_2.1.6.bb => opendnssec_2.1.8.bb} | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-) rename recipes-security/opendnssec/{opendnssec_2.1.6.bb => opendnssec_2.1.8.bb} (87%) diff --git

[yocto] [meta-security][PATCH 08/12] samhain: update to 4.4.3

Signed-off-by: Armin Kuster --- recipes-ids/samhain/samhain.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-ids/samhain/samhain.inc b/recipes-ids/samhain/samhain.inc index 3b4aab9..6a2eb08 100644 --- a/recipes-ids/samhain/samhain.inc +++

[yocto] [meta-security][PATCH 07/12] python3-scapy: upgrade 2.4.3 -> 2.4.4

--- .../scapy/{python3-scapy_2.4.3.bb => python3-scapy_2.4.4.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/scapy/{python3-scapy_2.4.3.bb => python3-scapy_2.4.4.bb} (96%) diff --git a/recipes-security/scapy/python3-scapy_2.4.3.bb

[yocto] [meta-security][PATCH 06/12] python3-privacyidea: upgrade 3.3 -> 3.5.1

--- ...{python3-privacyidea_3.3.bb => python3-privacyidea_3.5.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/mfa/{python3-privacyidea_3.3.bb => python3-privacyidea_3.5.1.bb} (96%) diff --git a/recipes-security/mfa/python3-privacyidea_3.3.bb

[yocto] [meta-security][PATCH 05/12] libseccomp: upgrade 2.5.0 -> 2.5.1

drop patch merged in update --- .../files/fix-mips-build-failure.patch| 49 --- ...ibseccomp_2.5.0.bb => libseccomp_2.5.1.bb} | 5 +- 2 files changed, 2 insertions(+), 52 deletions(-) delete mode 100644 recipes-security/libseccomp/files/fix-mips-build-failure.patch

[yocto] [meta-security][PATCH 04/12] fscryptctl: upgrade 0.1.0 -> 1.0.0

--- .../fscryptctl/{fscryptctl_0.1.0.bb => fscryptctl_1.0.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/fscryptctl/{fscryptctl_0.1.0.bb => fscryptctl_1.0.0.bb} (94%) diff --git a/recipes-security/fscryptctl/fscryptctl_0.1.0.bb

[yocto] [meta-security][PATCH 03/12] ding-libs: upgrade 0.5.0 -> 0.6.1

--- .../libdhash/{ding-libs_0.5.0.bb => ding-libs_0.6.1.bb}| 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) rename recipes-security/libdhash/{ding-libs_0.5.0.bb => ding-libs_0.6.1.bb} (71%) diff --git a/recipes-security/libdhash/ding-libs_0.5.0.bb

[yocto] [meta-security][PATCH 01/12] arpwatch: upgrade 3.0 -> 3.1

From: Armin Kuster LIC_FILES_CHKSUM update do to yr change --- .../arpwatch/{arpwatch_3.0.bb => arpwatch_3.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-scanners/arpwatch/{arpwatch_3.0.bb => arpwatch_3.1.bb} (93%) diff --git

[yocto] [meta-security][PATCH 02/12] checksec: upgrade 2.1.0 -> 2.4.0

LIC_FILES_CHKSUM update do to yr change --- .../checksec/{checksec_2.1.0.bb => checksec_2.4.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-scanners/checksec/{checksec_2.1.0.bb => checksec_2.4.0.bb} (78%) diff --git

Re: [yocto] [meta-security] [PATCH V2 0/8] Some fixes for IMA/EVM

merged On 2/20/21 4:18 AM, liu.min...@gmail.com wrote: > From: Ming Liu > > Changes in patch set V2: > > 1 Split patches as suggested by Dmitry Baryshkov. > > Ming Liu (8): > ima-evm-utils: set native REQUIRED_DISTRO_FEATURES to empty > initramfs-framework-ima: fix a wrong path >

[yocto] [meta-security][PATCH 5/5] nikito: Update common-licenses references to match new names

Signed-off-by: Armin Kuster --- recipes-scanners/buck-security/buck-security_0.7.bb | 2 +- recipes-scanners/checksecurity/checksecurity_2.0.15.bb | 2 +- recipes-security/nikto/nikto_2.1.6.bb | 2 +- recipes-security/redhat-security/redhat-security_1.0.bb | 2 +- 4 files

[yocto] [meta-security][PATCH 3/5] openscap: Inherit python3targetconfig

Signed-off-by: Armin Kuster --- meta-security-compliance/recipes-openscap/openscap/openscap.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-security-compliance/recipes-openscap/openscap/openscap.inc b/meta-security-compliance/recipes-openscap/openscap/openscap.inc

[yocto] [meta-security][PATCH 4/5] scap-security-guide: Inherit python3targetconfig

Signed-off-by: Armin Kuster --- .../scap-security-guide/scap-security-guide.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide.inc

[yocto] [meta-security][PATCH 2/5] python3-suricata-update: Inherit python3targetconfig

Signed-off-by: Armin Kuster --- recipes-ids/suricata/python3-suricata-update_1.1.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-ids/suricata/python3-suricata-update_1.1.1.bb b/recipes-ids/suricata/python3-suricata-update_1.1.1.bb index 0070b5b..732ca9a 100644

[yocto] [meta-security][PATCH 1/5] apparmor: Inherit python3targetconfig

Signed-off-by: Armin Kuster --- recipes-mac/AppArmor/apparmor_3.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-mac/AppArmor/apparmor_3.0.bb b/recipes-mac/AppArmor/apparmor_3.0.bb index 35e95a0..015205d 100644 --- a/recipes-mac/AppArmor/apparmor_3.0.bb +++

Re: [yocto] [meta-security] [PATCH V2 0/8] Some fixes for IMA/EVM

On 2/20/21 4:18 AM, liu.min...@gmail.com wrote: > From: Ming Liu > > Changes in patch set V2: > > 1 Split patches as suggested by Dmitry Baryshkov. Thanks for for the changes. This series is now being build tested etc. Many thanks, - armin > > Ming Liu (8): > ima-evm-utils: set native

[yocto] [meta-security][PATCH] softhsm: drop pkg as meta-oe has it

Signed-off-by: Armin Kuster --- recipes-security/softHSM/softhsm_2.6.1.bb | 30 --- 1 file changed, 30 deletions(-) delete mode 100644 recipes-security/softHSM/softhsm_2.6.1.bb diff --git a/recipes-security/softHSM/softhsm_2.6.1.bb

Re: [yocto] Yocto Technical Team Minutes, Engineering Sync, for Feb 16 2021

Trevor, On 2/16/21 11:10 AM, Trevor Woerner wrote: > Yocto Technical Team Minutes, Engineering Sync, for Feb 16 2021 > archive: > https://docs.google.com/document/d/1ly8nyhO14kDNnFcW2QskANXW3ZT7QwKC5wWVDg9dDH4/edit Thanks for taking and sending the minutes. -armin > > == disclaimer == > Best

Re: [yocto] [meta-tensorflow] maintained?

On 12/14/20 4:56 AM, Marek Belisko wrote: > Hi, > > I'm l;booking for a tensorflow recipe and forum that meta-tensorflow > have support for it (also saw that gatesgarth branch is there) but I > cannot build tensorflow + tensorflow seems to be a bit outdated. > Anybody know if this layer is

Re: [yocto] [docs] Yocto Project Technical Documentation Request For Quote

On 11/30/20 11:42 PM, Nicolas Dechesne wrote: > hi there, > > The Yocto Project is looking to hire a technical writer to develop and > maintain the many documents the project supplies the greater > community, including the official Yocto Project documentation website [1]. > > We expect to build

Re: [yocto] strange meta-security bbappend file with two percent signs

On 11/21/20 1:56 PM, Robert P. J. Day wrote: > while the bitbake user manual insists: > > "The use of the ” % ” character is limited in that it only works > directly in front of the .bbappend portion of the append file’s name. > You cannot use the wildcard character in any other location of

Re: [yocto] [meta-security][PATCH] scap-security-guide: fix build with Python 3.9

MESPACE)): > + values.append(value) > + > +-parent_map = dict((c, p) for p in benchmark.getiterator() for c in p) > ++parent_map = dict((c, p) for p in benchmark.iter() for c in p) > + for rule in \ > + benchmark.findall(".//{%s}Rule" % (XCCDF_

[yocto] [meta-security][PATCH 3/3] suricata: fix compiling on gcc10

Signed-off-by: Armin Kuster --- recipes-ids/suricata/suricata_4.1.8.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-ids/suricata/suricata_4.1.8.bb b/recipes-ids/suricata/suricata_4.1.8.bb index 9b7122b..135871c 100644 --- a/recipes-ids/suricata/suricata_4.1.8.bb

[yocto] [meta-security][PATCH 1/3] apparmor: update to 3.0

skip ptest for now, on todo list for fix. Runtime test pass remove patch now included in update: 0001-regression-tests-Don-t-build-syscall_sysctl-if-missi.patch Signed-off-by: Armin Kuster --- .../{apparmor_2.13.4.bb => apparmor_3.0.bb} | 62 +---

[yocto] [meta-security][PATCH 2/3] packagegroup-core-security: apparmor 3.0 ptest does not build

for now skip apparmor ptest Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index

[yocto] [meta-security][PATCH 2/2] security-test-image: tweak to get more tests to runn

Signed-off-by: Armin Kuster --- recipes-core/images/security-test-image.bb | 9 - 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/recipes-core/images/security-test-image.bb b/recipes-core/images/security-test-image.bb index babe3fd..54d8978 100644 ---

[yocto] [meta-security][PATCH 1/2] apparmor: fix build issue with ptest enabled.

minor spacing cleanup Signed-off-by: Armin Kuster --- recipes-mac/AppArmor/apparmor_2.13.4.bb | 181 +- ...-Don-t-build-syscall_sysctl-if-missi.patch | 96 ++ 2 files changed, 186 insertions(+), 91 deletions(-) create mode 100644

[yocto] [meta-security][PATCH 1/4] libseccomp: fix ptest failures.

Fixes: BusyBox v1.32.0 () multi-call binary. Usage: dd [if=FILE] [of=FILE] [bs=N] [count=N] [skip=N] Don't use Busybox dd, not compatable. Use coreutils Signed-off-by: Armin Kuster --- recipes-security/libseccomp/libseccomp_2.5.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff

[yocto] [meta-security][PATCH 4/4] packagegroup-core-security-ptest: remove

Signed-off-by: Armin Kuster --- .../packagegroup-core-security-ptest.bb | 27 --- 1 file changed, 27 deletions(-) delete mode 100644 recipes-core/packagegroup/packagegroup-core-security-ptest.bb diff --git a/recipes-core/packagegroup/packagegroup-core-security-ptest.bb

[yocto] [meta-security][PATCH 3/4] security-test-image: simplify

Signed-off-by: Armin Kuster --- recipes-core/images/security-test-image.bb| 26 ++- .../packagegroup-core-security.bb | 14 ++ 2 files changed, 16 insertions(+), 24 deletions(-) diff --git a/recipes-core/images/security-test-image.bb

[yocto] [meta-security][PATCH 2/4] packagegroup-core-security-ptest: remove keyutils-ptest

Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security-ptest.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security-ptest.bb b/recipes-core/packagegroup/packagegroup-core-security-ptest.bb index cf34ded..75b816a

Re: [yocto] [meta-security][master][dunfell][PATCH] gitignore added

On 9/22/20 11:25 PM, Adrian Freihofer wrote: > After running testimage there are some python left overs at > lib/oeqa/runtime/cases/__pycache__/ > > Signed-off-by: Adrian Freihofer merged thanks > --- > .gitignore | 7 +++ > 1 file changed, 7 insertions(+) > create mode 100644 .gitignore

[yocto] [meta-security][PATCH] packagegroup-core-security: add opendnssec to pkg grp

Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index c69e3b3..789f4ea 100644 ---

[yocto] [meta-security][PATCH] opendnssec: add recipe

Signed-off-by: Armin Kuster --- .../opendnssec/files/fix_fprint.patch | 25 ++ .../opendnssec/files/libdns_conf_fix.patch| 217 ++ .../opendnssec/files/libxml2_conf.patch | 112 + .../opendnssec/opendnssec_2.1.6.bb| 37 +++ 4 files changed,

[yocto] [meta-security][PATCH 2/2] packagegroup-core-security: add libest package

Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index 4d98631..c69e3b3 100644 ---

[yocto] [meta-security][PATCH 1/2] libest: add recipe

Signed-off-by: Armin Kuster --- recipes-security/libest/libest_3.2.0.bb | 23 +++ 1 file changed, 23 insertions(+) create mode 100644 recipes-security/libest/libest_3.2.0.bb diff --git a/recipes-security/libest/libest_3.2.0.bb b/recipes-security/libest/libest_3.2.0.bb new

[yocto] [meta-security][PATCH 2/2] packagegroup-core-security: add softHSM

Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index 1d01800..4d98631 100644 ---

[yocto] [meta-security][PATCH 1/2] softHSM: add pkg

Signed-off-by: Armin Kuster --- recipes-security/softHSM/softhsm_2.6.1.bb | 30 +++ 1 file changed, 30 insertions(+) create mode 100644 recipes-security/softHSM/softhsm_2.6.1.bb diff --git a/recipes-security/softHSM/softhsm_2.6.1.bb

Re: [yocto] [meta-security][PATCH 2/2] apparmor: exclude mips, not supported

On 9/15/20 10:11 PM, Khem Raj wrote: > title says mips but it actually is for mips64 only it seems. right. easy to fix when I commit. Have not built qemumip so its unknown at this time. -armin > > On Tue, Sep 15, 2020 at 8:12 PM akuster wrote: >> Signed-off-by: Armin Kuster >

[yocto] [meta-security][PATCH 1/2] packagegroup-core-security: add more pkgs to base group

Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-core-security.bb | 17 + 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index

[yocto] [meta-security][PATCH 2/2] apparmor: exclude mips, not supported

Signed-off-by: Armin Kuster --- recipes-mac/AppArmor/apparmor_2.13.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-mac/AppArmor/apparmor_2.13.4.bb b/recipes-mac/AppArmor/apparmor_2.13.4.bb index 552cac7..dcdc1f7 100644 --- a/recipes-mac/AppArmor/apparmor_2.13.4.bb +++

Re: [yocto] [meta-security][master][dunfell][PATCH] clamav: update SO_VER to 9.0.4

merged to both. thanks On 9/10/20 7:11 AM, Charlie Davies wrote: > Signed-off-by: Charlie Davies > --- > recipes-scanners/clamav/clamav_0.101.5.bb | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/recipes-scanners/clamav/clamav_0.101.5.bb >

Re: [yocto] [meta-security][dunfell][PATCH] clamav: add INSTALL_CLAMAV_CVD flag to do_install

merged On 9/10/20 6:53 AM, Charlie Davies wrote: > Recipe provides INSTALL_CLAMAV_CVD flag to bypass clamav > cvd db creation. During do_install this flag should be > used to conditionally skip install of cvd db if needed. > > Signed-off-by: Charlie Davies > --- >

Re: [yocto] [meta-security][PATCH] ibmtpm2tss: add recipe

merged thanks On 9/11/20 12:37 AM, Jens Rehsack wrote: > From: Jens Rehsack > > Add recipe for companion of IBM Software TPM 2.0 - IBM's TPM 2.0 TSS. > It's a user space TSS for TPM 2.0. > > Signed-off-by: Jens Rehsack > --- > ...efile.am-expand-wildcards-in-prereqs.patch | 125

Re: [yocto] [meta-security][PATCH v2] ibmswtpm2: update to 1637

merged. thanks On 9/11/20 12:34 AM, Jens Rehsack wrote: > From: Jens Rehsack > > Update ibmswtpm2 from 1628 to 1637. Build 1637 Includes: > * Increase NV memory size to match PC Client RSA 3072 requirements > * Add and fix ACT support > * Update Visual Studio files to 2019. > > Signed-off-by:

Re: [yocto] [meta-security][PATCH] trousers: Fix the problem that do_package fails when multilib is enabled.

merged thanks On 9/7/20 10:28 PM, zhengruoqin wrote: > The following error will occur when multilib is enabled: > ERROR: trousers-0.3.14+gitAUTOINC+e74dd1d967-r0 do_package: QA Issue: > trousers: Files/directories were installed but not shipped in any package: > /lib > /lib/systemd >

Re: [yocto] [meta-security][PATCH 0/6] Some small dm-verity improvements

On 9/7/20 10:17 AM, Niko Mauno wrote: > This set of patches addresses some small issues in dm-verity rootfs > facility, which were observed while making use of dm-verity-img.bbclass > to generate dm-verity rootfs images for real arm-based hardware. For > purposes of establishing this changeset,

Re: [yocto] [meta-security][PATCH] sssd: Make manpages buildable

merged thanks On 8/25/20 5:01 AM, Jonatan Pålsson wrote: > Some XML related fixes are needed to make the sssd manpages buildable > > Signed-off-by: Jonatan Pålsson > --- > ...AC_CHECK_FILE-when-building-manpages.patch | 34 +++ > recipes-security/sssd/sssd_1.16.4.bb |

Re: [yocto] [meta-security][PATCH 0/6] Some small dm-verity improvements

On 9/7/20 10:35 AM, Bartosz Golaszewski wrote: > On Mon, Sep 7, 2020 at 7:17 PM Niko Mauno wrote: >> This set of patches addresses some small issues in dm-verity rootfs >> facility, which were observed while making use of dm-verity-img.bbclass >> to generate dm-verity rootfs images for real

[yocto] [meta-security][PATCH] packagegroup-core-security: dont include suricata on riscv or ppc

Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index c6342fd..6aa0d6c

Re: [yocto] Outreachy internship project - license tracing enhancement

On 9/9/20 3:51 AM, Paul Eggleton via lists.yoctoproject.org wrote: > Hi folks > > I'd like to propose we put forward the following project proposal for an > Outreachy internship (https://www.outreachy.org/communities/cfp/). I'm > prepared to be the mentor for the project and Microsoft will

[yocto] Yocto Zeus stable branch

Hello, The Zeus branch was defined as a transitional branch with a 9 month stable cycle since LTS was created. The 3.0.4 was the last Zeus dot release. We have since added several Build stabilization changes and last minute backports . We intend on doing on last formal build cycle but no QA so no

[yocto] Warrior and Thud stable branches

Sorry. still have the old email address in my contacts. re-sending. Forwarded Message Subject:[yocto] Warrior and Thud stable branches Date: Tue, 8 Sep 2020 21:39:28 -0700 From: akuster via lists.yoctoproject.org Reply-To: akuster...@gmail.com

[yocto] Warrior and Thud stable branches

Hello, A few words regarding the older stable releases, Thud and Warrior. Thud no longer has an active Community Maintainer so this release with be move to the  EOL state.  Warrior did have a volunteer but no activity to date and this branch will also move to the EOL state. This will take affect

Re: [yocto] poky dhcpcd failed build

May I suggest opening a Yocto bug on this with steps to reproduce the failure. - armin On 9/8/20 7:45 AM, Yocto wrote: > > > On 9/8/20 9:41 PM, Paul Barker wrote: >> On Tue, 8 Sep 2020 at 15:17, Yocto wrote: >>> On 9/8/20 7:57 PM, Paul Barker wrote: >>> >>> On Tue, 8 Sep 2020 at 07:26, Yocto

Re: [yocto][meta-security][PATCH] dhcp: remove bbappend file

This patch set is for meta-selinux -armin On 9/6/20 10:14 PM, Chen Qi wrote: > dhcp has been removed, thus removing its bbappend file. > > Signed-off-by: Chen Qi > --- > recipes-connectivity/dhcp/dhcp_%.bbappend | 1 - > recipes-connectivity/dhcp/dhcp_selinux.inc | 3 -- >

[yocto] [meta-security][PATCH] cryptsetup-tpm-incubator: remove reference from other files

Signed-off-by: Armin Kuster --- meta-tpm/conf/distro/include/maintainers.inc| 1 - .../recipes-core/packagegroup/packagegroup-security-tpm2.bb | 2 -- 2 files changed, 3 deletions(-) diff --git a/meta-tpm/conf/distro/include/maintainers.inc

Re: [yocto] [meta-security][PATCH] libseccomp: fix cross compile error for mips

On 8/2/20 11:21 PM, kai wrote: > From: Kai Kang > > Backport patch to fix cross compile error for mips: > > | syscalls.h:44:6: error: expected identifier or '(' before numeric constant > |44 | int mips; > | | ^~~~ Merged. thanks > > Signed-off-by: Kai Kang > --- >

[yocto] [meta-security][PATCH] cryptsetup-tpm-incubator: drop recipe

The upstream package appears to tbe dead so drop it. Signed-off-by: Armin Kuster --- .../cryptsetup-tpm-incubator_0.9.9.bb | 47 --- .../files/configure_fix.patch | 16 --- 2 files changed, 63 deletions(-) delete mode 100644

  1   2   3   >